Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
File:                     P__L7IiMEEfyIdfPk5a_FBKrr5s.mft (raw, json)
Hash identifier:          m9osg3Ljiqoy9KNc3EjkfQAzXtNFrERvvvzjT6Z7h4I=
Subject key identifier:   8E:39:44:61:1E:F2:1D:0B:6C:2C:36:A7:27:A0:F6:6B:D8:88:DD:66
Authority key identifier: 3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
Certificate issuer:       /CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Certificate serial:       019EBFC8808585773C5403DB07700153BA36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
Manifest number:          0F46
Signing time:             Sat 13 Jun 2026 07:00:48 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:48 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:48 +0000
Files and hashes:         1: P__L7IiMEEfyIdfPk5a_FBKrr5s.crl (hash: wLpeeJvb4rNlXhSjButttQbBok0FPDHMdK4PweNc+HI=)
                          2: SaGiZjjt90SX7-BzKCTX7bYUJCE.roa (hash: shQxuuEzemQfoeUgl6rxwi+Wbc4ekvnlLIFK68Q9YjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:80:85:85:77:3c:54:03:db:07:70:01:53:ba:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
        Validity
            Not Before: Jun 13 07:00:48 2026 GMT
            Not After : Jun 14 07:00:48 2026 GMT
        Subject: CN=8e3944611ef21d0b6c2c36a727a0f66bd888dd66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:44:5b:d9:89:96:83:31:b2:3e:81:70:97:5a:
                    ea:ed:68:a6:ec:47:11:e4:5e:a5:2b:52:bc:7b:c4:
                    43:a9:ef:a0:d7:63:49:58:bf:d0:2b:58:09:a1:1a:
                    19:3f:bc:f5:ba:b6:47:7a:a7:af:60:15:f8:b2:12:
                    20:8d:53:14:f6:05:8d:9c:35:8e:c6:3b:33:29:40:
                    57:01:e6:ff:c0:e2:be:69:00:78:12:d4:82:65:ed:
                    46:e0:1f:05:a4:33:f2:17:5c:a6:84:44:05:b0:4e:
                    44:d2:05:39:7c:c8:3d:6e:7b:49:38:a0:4b:a7:22:
                    1e:c8:2f:db:bd:06:5d:ef:c5:d6:56:66:a0:57:4a:
                    aa:92:95:00:bc:7a:9e:81:f8:ed:81:1a:ec:02:8f:
                    d4:55:16:12:4d:18:7e:7d:30:8d:ff:fc:44:96:d6:
                    cb:1c:2a:95:27:52:03:43:3a:42:55:ae:11:71:72:
                    62:f9:0e:d7:39:7d:91:e0:a5:74:93:b3:67:e2:1a:
                    23:58:07:bf:22:65:d2:20:cd:22:80:1c:49:18:77:
                    02:dd:8a:b3:a8:0f:b0:5a:04:4a:d3:9f:01:fe:30:
                    d8:45:a9:45:be:3b:fa:a1:1f:cd:c0:9a:22:22:d4:
                    0b:44:c9:64:91:47:1c:f4:84:61:59:85:e2:37:b1:
                    fe:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:39:44:61:1E:F2:1D:0B:6C:2C:36:A7:27:A0:F6:6B:D8:88:DD:66
            X509v3 Authority Key Identifier:
                keyid:3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:38:be:85:df:7b:bd:5c:95:ab:45:ff:7f:2c:3c:43:d6:1b:
         0a:b8:79:64:bd:e6:bd:d3:2d:55:ba:02:0c:b1:ac:7e:75:ed:
         15:1f:84:85:32:f2:7b:c6:49:d2:bf:ad:7c:b1:b6:7c:64:ee:
         2d:8f:76:5c:2c:ac:24:1c:8b:e0:b1:f5:b6:91:f1:73:a6:ba:
         8f:e4:95:44:5f:24:28:3d:c6:ca:73:4a:ac:93:02:08:ca:2d:
         64:9a:59:29:9b:c0:51:00:46:63:56:de:34:c3:a6:68:b1:4c:
         66:96:55:91:ce:dd:5f:01:7e:47:c7:eb:86:15:59:92:d7:83:
         4b:fe:22:0d:07:5c:83:b0:43:66:ca:12:64:e9:35:42:c0:99:
         37:54:b9:27:33:fc:8a:dc:58:1b:85:29:b0:d3:7c:5d:09:95:
         bc:9d:59:45:50:49:1d:43:65:ec:19:a7:27:28:a6:1b:18:9b:
         10:fd:50:81:f2:5b:a0:32:e6:5c:da:f3:42:a9:6e:62:f4:89:
         3b:04:e3:52:30:de:d9:3c:d5:15:d3:4a:a9:0a:bf:71:5c:9f:
         e9:8b:05:ab:f7:e8:da:a8:34:b6:0c:01:85:f3:df:23:39:63:
         eb:31:c8:08:e4:d6:10:df:b6:5e:f3:e0:73:b5:4d:de:8e:69:
         99:6e:2e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:14:29 2026 by rpki-client